Hours:
35 hours, permanent, hybrid working.
Closing Date:
Mon, 25 Aug 2025
Are you passionate about leading impactful IT audits and helping to shape the future of Technology Risk Management? If so, this is your opportunity to drive meaningful change in a fast-paced, agile environment where your expertise will make a real difference.
Join us as a Senior Specialist IT Auditor to take the lead on multiple audits as part of our annual audit plan, working closely with senior leaders across Group Internal Audit and the wider organisation.
Who Are We?
Not just another building society. Not just another job.
We’re the fourth biggest building society in the UK and what makes us a bit different is that we’re a mutual organisation. We don’t have shareholders; we’re owned by our members.
Our colleagues say Skipton is a great place to work, and you could be one of them, bringing with you new ideas on how we can keep customers at the heart of what we do. Whatever your background, and whatever your goals, we’ll help you take the next step towards a better future.
The Skipton Group includes companies within the UK, Channel Islands and New Zealand. These include: Skipton Building Society; Connells Group (which is a fully owned group company of SBS and is the largest Estate Agency in the UK); Skipton International Limited (a Guernsey based bank offering residential mortgages and savings products for Channel Island residents and UK BTL mortgages for non-UK residents); and Jade Corporation (a software company based in New Zealand).
Meet the Team
Our vision is to provide data-led assurance and insights to support the Skipton Group in delivering its purpose.
GIA consists of over 35 colleagues within four teams. You will be joining the team of six colleagues that focus on delivering IT audits across the Skipton Group. Understanding the key risks and protecting our customers and stakeholders are integral to what we do. We work closely with the First and Second Line functions to make sure that we provide timely and valuable assurance and advisory services.
Our core role is to provide assurance to the Board Audit Committee that the key Technology, Information Security and Data Management risks across the Skipton Group are being effectively managed. We are also working on a number of other exciting initiatives, such as implementing the wider GIA strategy including advancing our use of data analytics, visualisation, AI, agile auditing and continuous monitoring.
What Will You Be Doing?

You will be performing and / or leading a wide range of technical audits including:

• Cyber Security Risk Management
• IT Network / Infrastructure security
• Cloud Security
• Software development
• IT Disaster Recovery and Resilience
• IT risk management and governance reviews

This role enables you to further develop your technical skills in IT and Information Security auditing, lead small teams, and coach and develop colleagues. As a Senior Specialist IT Auditor, you will be responsible for leading the delivery of audits as well as playing a vital role in supporting the delivery of other reviews. You will also engage with stakeholders across the Skipton Group, to help shape the Internal Audit Plan and to provide feedback on audit outcomes and prepare audit reports to encourage appropriate action. You will plan and deliver the audit fieldwork, and prepare audit reports to a good standard. You will build trusted relationships with stakeholders across the business, sharing insights and providing opinions through continuous monitoring. You will also have opportunities to be involved in various Transformation / Change projects and initiatives across the Skipton Group, and audits that focus on AI and Data Governance.
What Do We Need From You?

We’re looking for someone with a proven track record in performing and leading IT and information security audits end to end. You will be able to manage varying workloads and build relationships with stakeholders at all levels. The key competencies for this role are:

• Ability to take ownership and drive tasks forward with minimal direction;
• Proven experience in IT and information security auditing;
• Strong understanding of IT and information security risk, controls, and governance frameworks;
• Excellent communication skills (both verbal and written);
• Leading and motivating small teams;
• Being hands on and delivering audits (from planning through to fieldwork and reporting) within tight deadlines;
• Analytical skills;
• Stakeholder management;
• Ability to use data analytics and visualisation to support audit testing, outcomes and reporting;
• Experience of working within a regulated environment such as Financial Services;
• Ability to understand new and changing regulations across a variety of areas; and
• Organisation skills with the ability to manage multiple priorities; and
• A proactive, collaborative mindset with a passion for quality and improvement.

• Ability to take ownership and drive tasks forward with minimal direction;
• Proven experience in IT and information security auditing;
• Strong understanding of IT and information security risk, controls, and governance frameworks;
• Excellent communication skills (both verbal and written);
• Leading and motivating small teams;
• Being hands on and delivering audits (from planning through to fieldwork and reporting) within tight deadlines;
• Analytical skills;
• Stakeholder management;
• Ability to use data analytics and visualisation to support audit testing, outcomes and reporting;
• Experience of working within a regulated environment such as Financial Services;
• Ability to understand new and changing regulations across a variety of areas; and
• Organisation skills with the ability to manage multiple priorities; and
• A proactive, collaborative mindset with a passion for quality and improvement